Never trust an upload's filename

1

mitmproxy

Using Wireshark and Ncat was how I first learnt to do this. It turns out pentesting tools like mitmproxy make this easier - it can intercept and modify the requests in-flight.

#Developer Tools #Security #Software Development 81 social mentions

2

cURL

HTTP clients usually send file uploads using a multi-part POST request. We can use Wireshark to see what the request looks like. Here's one from cURL:.

#API Tools #APIs #Developer Tools 105 social mentions